5941
KeePassXC 2.2.0 released with YubiKey and TOTP support
KeePassXC Password Manager
New
The latest blog posts to take off on Hacker News. 8,772 posts.
5942
New TSA Policy May Lead to Increased Scrutiny of Reading Material
The TSA is testing new requirements that passengers remove books and other paper goods from their carry-on baggage when going through airline security. Given the sensitivity of our reading choices, this raises privacy concerns .
5943
AWS Security Primer
I was preparing some AWS Security related training. Soon, I realized that this topic is too huge to fit into my brain. So I s...
5944
Wikimedia Foundation v. NSA
The Wikimedia Foundation’s mission is to support the communities of readers and contributors who share and consume information on Wikipedia and the other free-knowledge projects. Privacy and anonym…
5945
How I Hacked My University's Registration System with Python and Twilio
Learn how to create a Python program that sends you an SMS text message whenever an event happens, such as university class registration opens.
5946
Why So Many Top Hackers Hail from Russia
Conventional wisdom says one reason so many hackers seem to hail from Russia and parts of the former Soviet Union is that these countries have traditionally placed a much greater emphasis than educational institutions in the West on teaching information technology in middle and high schools, and yet they lack a…
5947
Important security vulnerabilities in OpenVPN
UPDATE: OpenVPN fuzzers now released. Summary I’ve discovered 4 important security vulnerabilities in OpenVPN. Interestingly, these were not found by the two recently completed audits of Open…
5948
An Ancient Kernel Hole Is Not Closed
The "stack clash" series of vulnerabilities were a prime opportunity to demonstrate the strength of grsecurity's approach to security. Unlike upstream Linux and other OSes, the issues uncovered were unexploitable under grsecurity for many years.
5949
How to use BeyondCorp to ditch VPN, improve security and go to the cloud
The BeyondCorp security engineering team at Google just announced their fourth research paper.
5950
Transparency report
Proton's transparency report with aggregate statistics of legal orders from the Swiss authorities, covering Proton Mail, Proton Drive, and Proton Calendar.
5951
5952
5953
Inside the Largest US Voter Data Leak
UpGuard has discovered an open database containing information on what appear to be approximately 198 million American voters left misconfigured by a GOP analytics firm.
5954
Intro to SDR and RF Signal Analysis
A beginner's introduction to Software Defined Radio (SDR) and RF signal analysis, covering theory, tools, and visual signal characteristics.
5955
5956
Securing a laptop for travel to China
We're all impatiently waiting on quantum-proof asymmetrical crypto algorithms to become commonplace. Until that happens, we must all live with the assumption that all currently used asymmetric crypto will be trivially decryptable once quantum computers become powerful enough. This is probably the reason why government…
5957
EFF's New Wordlists for Random Passphrases
Joe Bonneau dives deep into systems using dice to generate random passphrases and introduces EFF's three new wordlists.
5958
Someone cloned my website and is using it to scam people
I was looking on the DuckDuckGo search results for "anonymous bitcoin sms" today, just to see what was out there. My SMS Privacy was the top result, as expected. But the second result was new to me:
5959
How I Stole a User's Siacoin
A lesson in Sia wallet seed safety
5960
Is SHA-3 slow?
In a recent post , Adam Langley complains that “SHA-3 is slow”. Similar comments appear from time to time on the web (see also David Wong's post ). But what does it mean precisely? Let us dig into it.
5961
How I Found a 20-Year-Old Linux Kernel Bug
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
5962
5963
Updates for older platforms to protect against potential nation-state activity
Microsoft releases additional updates for older platforms to protect against potential nation-state activity
5964
Securing your API: a modern alternative to CSRF tokens
Cross-Site Request Forgery (CSRF) allows an attacker to make unauthorized requests on behalf of a user. We tackle CSRFs while allowing a subset of Cross-Origin requests.
5965
Don't publicly expose .git (2015)
Sebastian participated in a CTF (capture the flag) a couple of months ago. One challenge he faced was the task of restoring a git repository from a …
5966
Signal intelligence 101: SIGINT targets
A quick overview of the various types of signal intelligence targets, with an emphasis on the Soviet Cold War systems
5967
5968
How Torch broke ls and made me vulnerable
If used incorrectly, LD_LIBRARY_PATH can cause a plethora of issues
5969
Intelligent Tracking Prevention
Note: Read about improvements to this technology in recent blog posts about Intelligent Tracking Prevention, and the Storage Access API.
5970
Set up a malware analysis lab with VirtualBox, INetSim and Burp
In this post we will set up a virtual lab for malware analysis. We’ll create an isolated virtual network separated from the host OS and from the Internet, in which we’ll setup two victim virtual machines (Ubuntu and Windows 7) as well as an analysis server to mimic common Internet services like HTTP or DNS. Then…